Fix invalid search filter

diff --git a/doc/guide/admin/sasl.sdf b/doc/guide/admin/sasl.sdf
index 3a52fcdb6300f5402fc386d9f7c8312a10219fef..c3810560469ec637f67ae9fa6464a27794a7f858 100644 (file)
--- a/doc/guide/admin/sasl.sdf
+++ b/doc/guide/admin/sasl.sdf
@@ -501,7 +501,7 @@ and the authenticated user can become ANY DN returned by the search.
 If an LDAP entry looked like:
 
 >      dn: cn=WebUpdate,dc=example,dc=com
->      saslAuthzTo: ldap:///dc=example,dc=com??sub?objectclass=Person
+>      saslAuthzTo: ldap:///dc=example,dc=com??sub?(objectclass=Person)
 
 then any user who authenticated as cn=WebUpdate,dc=example,dc=com
 could authorize to any other LDAP entry under the search base